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Nonclassical correlations between the quadrature-phase 
amplitudes of two spatially separated optical beams are ex- 
ploited to realize a two-channel quantum communication ex- 
periment with a high degree of immunity to interception. 
For this scheme, either channel alone can have an arbitrarily 
small signal-to-noise ratio (SNR) for transmission of a coher- 
ent "message". However, when the transmitted beams are 
combined properly upon authorized detection, the encoded 
message can in principle be recovered with the original SNR 
of the source. An experimental demonstration has achieved 
a 3.2 dB improvement in SNR over that possible with corre- 
lated classical sources. Extensions of the protocol to improve 
its security against eavesdropping are discussed. 
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I. INTRODUCTION 

Principal motivations for the investigation of man- 
ifestly quantum or nonclassical states of the electro- 
magnetic field have beea JJieir possible exploitation for 
optical communication trB and for enhanced measure- 
ment sensitivity, o For example, relative to a coher- 
ent state, the reduced quantum fluctuations associ- 
ated with squeezed and number states offer potential 
for improvina, channel capacity in the transmission of 
information. Squeezed states of light have been widely 
employed to achieve measurement sensitivity beyond the 
standard quantum lirriits in applications such as pre- 
cision interferometry, O the detection of directly en, 
coded amplitude modulation, Q atomic spectroscopy, 
and quantum noise reduction in optical amplification. 
Likewise, nonclassical correlations for the amplitudes of 
spatially separated beams have been exploited in diverse 
situations, including demonstmtions of the EPR para- 
dox for continuous varifiKlea, of quantum nondenioli- 
tion detection (QND), OEJ and of a quantum-optical 
tap. O 

Within the broader setting of quantum information 
science (QIS), there has been growing interest and im- 
portant progress concerning the prospects for quan- 
tum information processing with continuous quantuni 
variables, including universal miantum computation, 1131 
quantum erparj— .correction, llJila and entanglement 
purification. OtS Theories for quantum teleportation of 
continuous quantum variables in an infinite dimensional 



Hilbert space have been developed, including for 

broad bandwidth telepottation Ej and for teleportation 
of atomic wavepackets. This formalism has also been 
applied to super-dense quantum coding. O On an exper- 
imental front, these developments in QIS led to the first 
bona fide demonstration of quantum teleportation, which 
was carried out by exploiting nonclassical states of^ 
in conjunction with continuous quantum variables. 

Against this backdrop the focus of attention in this ar- 
ticle is optical communication in two channels with quan- 
tum correlated light fields and the associated quadra- 
ture amplitudes. O The goal is to explore the exten- 
sion of quantum cryptography from the usual setting 
of discrete -iiariables as pioneered by C. Bennett and 
colleagues O (e.g., photon polarization as in the experi- 
ments of Refs. poj^lSSt) into the realm of continuous quan- 
tum variables (e.g., the complex amplitude of the elec- 
tromagnetic field). Apart from our work, several related 
schemes for quantum cryptography based upon contin- 
uous variables have recently been analyzed, including a 
single-beam scheme with squeezed light e4.as. well dual- 
beam schemes with shared entanglement. However, 
we stress at the outset that neither for our scheme nor 
for any of these other protocols, can any claim about ab- 
solute security be made. Rather, we suggest that these 
protocols (and suitable extensions thereof) are worthy 
candidates for more detailed analyses. Such an undertak- 
ing would involve various important matters of principle 
as well as practice for continuous quantum variables, and 
might hopefully lead to security proofs such as have-re- 
cently emerged in the case of discrete variables. EZTE^ 

As illustrated in Figure 1, the basic idea in our scheme 
is to construct a "transmitter" which combines a co- 
herent signal of amplitude e/t (the "message") with the 
large fluctuating flelds generated in nondegeperate opti- 
cal parametric amplification (the "noise" ) . O The "mes- 
sage" and the "noise" are superimposed at mirror M 
with transmission coeflScient t «1. Note that although 
each of the two transmitted beams along channels [A, B) 
has large phase insensitive fluctuations that are individ- 
ually indistinguishable from a thermal source, the 
quadrature-phase amplitudes of tia|e-,two-beams can be 
quantum copies of one another, Wtn and in fact form 
an entangled EPR state. c3'c31 Hence proper subtrac- 
tion of the photocurrents at the "receiver" can result 
in the faithful reconstruction of the encoded "message" 
even though the signal-to-noise ratios Rj {j—A,B) dur- 
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ing transmission are individually much less than one. In- 
deed, in a lossless system with large parametric gain, the 
signal-to-noise ratio of the reconstructed message Rt can 
approach the signal-to-noise ratio i?o of the original mes- 
sage (e^/t^), which was written in the transmitter as a 
coherent state before the mirror M in Figure 1. Note that 
the individual Channels {A, B) have a high degree of im- 
munity to unauthorized interception since the signal-to- 
noise ratios Ra,b m these channels are each very small. 
Furthermore, any attempt to extract information from 
the (A, B) channels will reveal itself either by a decrease 
in Rt (classical extraction) or by an increase in the fluctu- 
ations of the orthogonal quadrature amplitude (quantum 
extraction) . 

In addition to achieving a faithful reconstruction of the 
message transmitted through M to the receiver, note that 
the scheme of Figure 1 also preserves to a high degree the 
signal-to-noise ratio for the original message beam that 
reflects from M. More specifically, for high gain and for 
losses dominated by the transmission coefficient of M, 
the signal-to-noise ratio for the reflected beam can 
approach Rq for the original message. In this limit, we 
then have that the information transfer coefficient T = 
(R,--|-Rt) / Ro ^ 2, where < T < 1 for classical devices 
and 1 < T 2 for manifestly quantum or nonclassical 
situations. B Hence the scheme depicted in Fig.l acts as 
a quantum optical tap in the fashion originally discussed 
by Shapiro. C3 It provides a received (or "tapped") mes- 
sage with a signal-to-noise ratio equal to that of the input 
{Rt/Ro) — > 1, while simultaneously transmitting an out- 
put field with signal-to-noise ratio equal to that of the 
input (Rr/Ro) — > 1. 

Of course similar schemes for two-channel communica- 
tion can be implemented with correlated classical noise 
sources (i.e., thermal light), each with large fluctuations 
which "hide" the message e during transmission. How- 
ever, with classical sources of whatever type, only excess 
fluctuations can be subtracted; the quantum fluctuations 
at the vacuum-state level will remain unchanged and will 
enforce a noise floor for information transmission and ex- 
traction. For the case illustrated in Figure 1, this noise 
floor for the message at the receiver is given by the sum of 
independent vacuum fluctuations from fields in channels 
{A, B) and sets a fundamental noise level of "2" (with 
"1" as the individual vacuum-state limits for the two 
channels). Here we adopt the usual convention for the 
demarcation between classical and nonclassical correla- 
tions in terms of the Jachavior the Glauber-Sudarshan 
phase-space function. H Hence for the case illustrated 
in Figure 1 but with classical input fields, the signal-to- 
noise ratio R[ for the detected message at the receiver 
is given by i?^ ~ |ep <C i?t. In fact, for classical in- 
puts, we have that T' = i?^ + i?^ < 1, and the system 
no longer functions as a quantum optical tap. Further- 
more, the individual channels {A, B) are not protected 
from unauthorized eavesdropping, since information can 



be extracted from these channels with impunity for clas- 
sical noise much greater than the vacuum-state limit. 

Apart from these considerations related to secure com- 
munication and quantum optical tapping, the configura- 
tion of Figure 1 can also be viewed as a means to realize 
super-dense-auantum coding e3 for continuous quantum 
variables. O Here, the message e/t is again encoded at 
the mirror M, but now in a single channel correspond- 
ing to one component of the entangled EPR state (e.g., 
channel A). This combination of the message and the 
fiuctuations from one component of the NOPA are trans- 
mitted to the receiving station where they are combined 
with the second component of the entangled output of 
the NOPA that has been independently transmitted (e.g., 
along channel B). The signal is then decoded by combin- 
ing the outputs of the two channels in a fashion similar 
to that shown in Figure 1 as discussed in more detail in 
Ref. ||2^. The principal distinctions between this dense 
coding scheme and the aforementioned dual channel ar- 
rangement are (1) the message is encoded in a single com- 
ponent of the entangled EPR beam instead of symmet- 
rically in both and (2) the received beams from paths 
(A, B) must be physically recombined, with the phases 
of the local oscillators {A, B) at the receiving station off- 
set by_|. Recall that for dense coding in its canonical 
form, H no signal modulation is applied to the second 
(i.e., channel B) component of the entangled state, so 
that it carries no information by itself. 

In subsequent sections of this paper, we describe in 
more detail the implementation of this general discus- 
sion about quantum communication with correlated non- 
classical fields. In our experiment, we have been able to 
demonstrate an improvement in signal-to-noise ratio by a 
factor of 2.1 over that possible with any classical source 
(that is, 10 log[Rt/R[] — 3.2 dB) and have succeeded 
in suppressing the noise of the difference photocurrent 
i_ = lA ^ is below that associated with the vacuum 
fluctuations of even a single beam, thus making possible 
transmission with |ep < 1. Quantum dense coding would 
thereby be enabled with the aforementioned changes in 
the overall experimental protocol. We conclude with a 
discussion of possible extensions for enhanced security 
against unauthorized eavesdropping. 

II. IMPLEMENTATION BY NONDEGENERATE 
PARAMETRIC AMPLIFICATION 

As illustrated in Figure 1, correlated nonclassical states 
for our work are generated by a nondegenerate opti- 
cal parametric amplifier (NOPA) that produces orthogo- 
nally polarized but frequency degenerate signal and idler 
beams for channels {A^B). We emphasize that these 
beams represent a realization of the entangled statejOrigj- 
inally discussed by Einstein, Podolsky, and Rosen. cSB 
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For the original EPR state, there exist perfect correla- 
tions both in position and momentum for two massive 
particles. In the optical case, the quadrature amplitudes 
of the electromagnetic field play the roles of position and 
momentum with a finite degree of correlation for finite 
NOPA gain, as has been experimentally demonstpicd B 
and exploited to realize quantum teleportation. c3 

A coherent-state "message" of total amplitude e/t is 
encoded in equal measure onto these entangled EPR 
beams by orienting its polarization at 45° with respect 
to the signal and idler polarizations at the mirror M of 
Figure 1. To obtain a quantitative statement of the per- 
formance of this system, we must include the finite gain 
of the amplifier as well as various passive losses, which 
together limit the degree of correlation that can be ex- 
ploited for communication. Following the analysis of Ref. 
[^, we find that the SNR Rj{fl) for the individual signal 
and idler photocurrents for propagation and detection 
in the presence of overall channel efficiency ^ is given 
by Rj{n) = £,e^ /2Gq{VL), where Gqifl) is the detected 
quantum-noise gain of the amplifier which can be deter- 
mined experimentally from measurements of the spectral 
densities a,b{^) for the fluctuations of photocurrents 
for signal and idler beams alone at either detector. Rela- 
tive to the frequency of the optical carrier determined by 
the down-conversion process in the NOPA, the frequency 
VL specifies the Fourier components of the quadrature- 
phase amplitudes of signal and idler fields as well as of 
the coherent field e. H Note that ^ (0 < ^ < 1) incor- 
porates the cavity escape efficiency for our NOPA, the 
propagation efficiency from the NOPA to the detectors, 
and the homodyne and quantum efficiencies of the bal- 
anced detectors themselves. O 

Although the individual fluctuations for channels 
{A,B) give rise to a level Gq{^) > 1, (that is, greater 
than the vacuum-state limit of either beam alone), these 
large fluctuations are correlated in a nonclassical man- 
ner and hence can be eliminated by proper choice of the 
quadrature amplitudes detected at {A,B). As shown 
in Ref. there is a continuous set of such ampli- 
tudes with minimum variance for their difference requir- 
ing only that the quadrature-phase angles {0a, Ob) satisfy 
Oa + 0B ~ 2p7r (j) — integer). Denoting one such pair by 
{Xai^b), we have that 

{(xa(si) - xsmiXAm - xb{^))) 

= V^(Sl)8(Sl + ^), (1) 

where 1^_(S7) is a variance which quantifies the degree 
of correlation between (Xa,Xb)- Explicit expressions 
for both VL(r2) and Gg(ri) are given in Ref. For 
propagation and detection in the presence of loss, wc in- 
troduce the quantities (F^, G^) which refer to the vari- 
ance and quantum noise gain for fictitious fields having 
propagated with total loss (1 — ^), where the spectral 



density of the photocurrent fluctuations $-(fi) is pro- 
portional to (il). Hence, the SNR Rd for detection of 
the message via i_ is given by Rd = /V!^{^), where 
•q accounts for the propagation and detection efficiency 
for the message from the mirror M to the photocurrent 
iA,B- Without discussing the general case, here we note 
simply that for efficient propagation and detection with 
(1 — ^) << 1 and for near threshold operation with 
(analysis frequency Vl) « (cavity linewidth F), then 
G^(f^) ^ l + \{T/nfi, while V^{n) 2(1-^) « 1, so 
that Rd{^) ?7e^/(l ^ 0- Hence in the ideal case with 
77 ^1 and ^ (1 — |i|^), with t as the amplitude trans- 
mission coefficient of mirror M, we find that the recon- 
structed message is recovered with the same SNR with 
which it was originally encoded (namely Rd — * e^/i^), 
while the fluctuations in the individual channels become 
arbitrarily large {Ra,b ~ ft'^e'^/T^ for n/T 0). 

As for the performance as an optical tap, note that the 
transfer coefficient associated with the detected message 
at the receiver and with the reflected output field is given 
by Td — {Rd + Rr)/Ro, where Rd is related to Rt by way 
of the propagation and detection efficiency rj from M to 
the photocurrents at the receivers. In the present case, 
we have that 

Jr^ 2rj]tl 

with |rp as the reflectivity of mirror M (|rr + |ir = l) and 
t/I (il) as the variance of the reflected field. Hence in the 
ideal case with ^ ^ {I - |ip), with 2(1 - 

^) and with UL{ri) = |rp, we have that Rd — > Rt and 
T(j — > 2. Thus in addition to providing large quantum 
fluctuations for secure transmission, the system also acts 
as a quantum optical tap with a nearly ideal transfer 
coefficient T. 

In fact the system can be considered as a realization 
of the scheme for quanliim tapping that was originally 
suggested by Shapiro. O To see this more clearly, recall 
that the projection of signal and idler fields along the 
45° polarization direiition of the message beam results 
in a squeezed field. O Hence, from the perspective of 
Ref. [Q, we are "tapping" the original message field by 
injecting squeezed light into the normally open (or vac- 
uum) port of mirror M. The use of the output of a non- 
degenerate parametric amplifier allows us subsequently 
to decompose this squeezed plus coherent field into in- 
dividually noisy signal and idler fields at polarizer P for 
transmission. 

III. EXPERIMENTAL SETUP AND RESULTS 

The general scheme for our experimental implementa- 
tion of these ideas is shown in Figure 1, where frequency 
degenerate but orthogonally polarized signal and idler 
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beams are generated by Type II down-conversion in a 
subthreshold optical parametric oscillator formed by a 
folded cavity containing an a-cut crystal of potassium ti- 
tanyl phosphate (KTP) that provides noncritical phase 
matching at 1.08/im. The crystal is 10mm long, is anti- 
reflection coated for both 1.08/im and 0.54//m, and has a 
measured harmonic conversion efficiency of 6 x 10~^/W 
(single-pass) for this geometry. The total intracavity pas- 
sive losses at l.OS/xm are 0.3% and the transmission co- 
efficient of mirror Ml is 3%. The amplifier is pumped 
by green light at 0.54 /itm generated by external fre- 
quency doubling-of a frequency-stabilized, TEMoo-mode 
Nd:YAP laser. c3 The subthreshold oscillator acts as a 
narrow-band amplifier (NOPA) which is locked to the 
original laser frequency with a weak counter-propagating 
beam. Simultaneous resonance for the orthogonally po- 
larized signal and idler fields is achieved by adjusting the 
temperature of the KTP crystal around 60°C with mil- 
liKelvin precision. The pump field at 0.54 fj,m is itself 
resonant in a separate and independently locked build- 
up cavity (enhancement ^ 5x). 
i-As we have demonstrated in our previous experiments, 
the orthogonally polarized signal and idler fields gen- 
erated by the NOPA individually are fields of zero mean 
values and exhibit large phase insensitive fluctuations. It 
is in the midst of this noise that we now hide a "message" , 
with this coherent field being combined with the signal 
and idler fields at the highly reflecting mirror M shown 
in Figure 1 ((1 — t'^) ~ 0.99). The coherent beam is in- 
jected at 45° with respect to signal and idler polarizations 
and is frequency shifted by r2o/27r = l.lMHz (single-side 
band) from the primary laser frequency with the help of 
a pair of acoustooptic modulators, which are gated "on" 
and "off" to provide information encoded for transmis- 
sion. The noisy but correlated signal and idler beams 
together with the coherent information are then sepa- 
rated by a polarizer P, transmitted independently over 
the two channels {A,B), and then directed to two sepa- 
rate balanced homodyne detectors for measurements of 
their individual quadrature-phase amplitudes and their 
mutual correlations. The local oscillators for the two 
balanced homodyne detectors originate from the laser at 
1.08/im; their phases can be independently controlled by 
mirrors mounted on piezoelectric transducers. The spec- 
tral densities of the photocurrents for the two channels 
{A = signal, B — idler) are defined by 

^A,Bm ^ J < ^AMt)^AMt + r)> e'^'^dT (3) 

and are recorded by a RF spectral analyzer, as is the 
spectral density 

<^>^{n) = J <i^{t)i^{t + T) > e'^^dr (4) 

for the difference photocurrent i- = ia — is- 



In Figures 2 and 3 we present results from a series of 
measurements of these various spectral densities. First 
of all, in Figure 2a, trace i gives the spectral density "^/a 
for channel A alone with an injected "message" and with 
the amplifier turned on to generate large (~ 7 dB) phase 
insensitive noise above the vacuum-state level ^oa (indi- 
cated by a dashed line in Figure 2) for the signal beam. A 
similar trace is obtained for the spectral density ^b- By 
contrast, trace ii in Figure 2a gives the spectral density 
$_ for the difference photocurrent z_, with the phases of 
the local oscillators adjusted for minimum noise and max- 
imum coherent signal. In this trace, the coherent mes- 
sage that was completely obscured in trace i emerges with 
high signal-to-noise ratio. Note that in trace ii the corre- 
lated quantum fluctuations for signal and idler fields are 
subtracted to approximately 0.4 dB below the vacuum- 
noise level 'i'oA of the signal beam alone (and likewise 
for the idler), indicating an improvement in SNR over a 
conventional single-channel communication scheme with 
a classical light source. 

To complete the discussion, we present in Figure 2b re- 
sults obtained with the amplifier turned off (that is, un- 
correlated vacuum-state inputs for signal and idler fields 
which are combined with the coherent "message" infor- 
mation at mirror M). Trace i shows the result for the 
signal beam alone (5'a), where again the noise floor ^'o^i 
is from the vacuum fluctuations of the signal beam; a 
similar trace is obtained for the idler beam {'^'b)- Trace 
ii gives the corresponding result for <!>_ for the com- 
bined signal and idler photocurrents when the amplifler 
is off. Note that this trace represents the best possible 
SNR with which the encoded information can be recov- 
ered when correlated classical noise sources are employed 
since here the (uncorrelated) vacuum fluctuations of sig- 
nal and idler beams set an ultipiate noise floor 3 dB above 
'i'oA (that is, $0- — 2^'oa)- cJ On comparing traces ii 
in Figures 2a and 2b, we see that the correlated quan- 
tum fluctuations of signal and idler fields brought about 
by parametric amplification result in an improvement in 
SNR of 3.2 dB relative to that possible with classical 
noise sources. 

The improvement in SNR with correlated quantum 
fields over classical fields in our two-channel communica- 
tion scheme can be of utility especially when the message 
is so weak that the SNR is poor for transmission with 
correlated classical sources (that is, for the case where 
vacuum noise dominates the encoded message) . This sit- 
uation is illustrated in Figure 3, where we plot for 
the two cases without (irace i) and with (trace ii) corre- 
lated quantum fields. cZl Relative to Figure 2, here the 
coherent beam has been attenuated resulting in a smaller 
SNR for the "message". Indeed in trace i, this infor- 
mation is "buried" by the vacuum noise $0- associated 
with independent vacuum fluctuations in channels A and 
B; recovery of the encoded information is poor. On the 
other hand, as shown in trace ii, when correlated quan- 
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turn fields are employed, there is a reduction in the noise 
floor by more than 3 dB which makes possible improved 
recovery of the encoded information, with the recovery 
here limited by losses in propagation and detection. B 

As for the actual performance with respect to opti- 
cal tapping, our system falls far short of the projected 
possibilities discussed in the preceding section because 
of an unfortunate mismatch between the transmissiv- 
ity |tp for mirror M and the overall system efficiency 
^. In quantitative terms, recall that the transfer coeffi- 
cient T for encoding information from the input beam 
to the reflected and transmitted beams at M is given by 
T = {Rr + Rt)/Ro whereas the transfer coefficient for 
the detected message photocurrent and the reflected sig- 
nal fleld is Td = {Rr + Rd)/Ro as given explicitly in Eq. 
(2). For the propagation and detection efficiencies in our 
experiment ~ 0.65 and rj ~ 0.75), these transfer coef- 
ficients are optimized for mirror transmission \t\^ 0.5 
for M. In our arrangement we have instead |tp = 0.01, 
with the inferred result that Td ~ 1.02, which is only 
marginally in the quantum domain. 

In the experiment described here, the receiver uses a 
local oscillator (LO) that originates from the fundamen- 
tal frequency of the same laser that generated the pump 
beam for the NOPA. This LO is necessary for proper 
detection of the quadrature amplitudes of the nonclassi- 
cal beams and of the message, since it provides a phase 
reference that follows phase fluctuations of the NOPA's 
pump beam. In practice, as the stability of the available 
lasers improve, one should consider schemes for which 
the measurement is carried out with nominally indepen- 
dent lasers for the LO and for the source. For example, 
one might employ a stabilized laser diode as a reference 
to phase lock lasers both at the sender and at the re- 
ceiver, where the laser diode could be widely distributed 
through optical flbers. Alternatively, Ralph has analyzed 
a scheme in which the local oscillators are traxismitted 
and recovered as part of the overall protocol. O 

IV. COMPARISON WITH OTHER DUAL BEAM 
SCHEMES 

It is perhaps obvious that the degree of immunity to 
interception for a two channel scheme such as we have dis- 
cussed is related to the degree of excess fluctuations for 
each individual beam. For the demonstration in Ref. , 
the excess noise used to "hide" the encoded information 
in each beam comes from some artificial unrelated source. 
Unfortunately such uncorrelated excess fluctuations also 
add noise to the coincidence signal in the recovery of the 
"message," even though the added noise scales differently 
as a function of photon number for single-beam mea- 
surements (linearly) and for dual beam measurements 
(quadratically). Hence larger background noise which 
better "hides" the encoded information also brings larger 



added noise in the extraction of the "message." Because 
of the quadratic dependence on the total photon number 
for the extra noise added in coincidence detection, this 
scheme is best suited to low light level transmission, as 
denocipstrated in the pioneering experiment by Hong et 
al. H 

The situation is quite different for the quadrature- 
phase amplitudes of the correlated signal and idler flelds 
generated by the NOPA. As the NOPA is pumped 
harder and the threshold for parametric oscillation is ap- 
proached, the gain of the amplifler increases, as do the 
excess fluctuations of the signal and idler flelds. How- 
ever, the correlation between the fluctuations of the sig- 
nal and idler beams also improves, giving rise to even 
better SNR for the recovered signal. The key point is 
that the large fluctuations in the signal and idler beams 
needed for immunity to interception are intrinsic and do 
not add extra noise to the recovered signal but, on the 
contrary, serve to reduce the noise in z_ as the gain of 
the amplifler increases. In the end, the SNR for the re- 
covered message is arbitrated by the imperfect correla- 
tion resulting from flnite gain and from passive losses 
in propagation and detection. On the other hand, this 
dependence provides a powerful means to detect eaves- 
dropping because unauthorized extraction of signal or 
idler fields from channels A or B results in a reduction 
of the detected correlation and hence an increase in the 
noise floor of the recovered message. Note that unautho- 
rized extraction of information—from both channels by 
way of a quantum optical tap cJ or a quantum nonde- 
molition measurement M can likewise be detected be- 
cause of the unavoidable increase of fluctuations for the 
orthogonal quadrature-phase amplitudes {Oa,b +7r/2) of 
the two channels. Furthermore, these quantum eaves- 
dropping schemes can be defeated in large measure by 
random switching of the phases of the message, signal, 
and idler beams as discussed below. 

Our system also offers advantages with respect to the 
(classical) digital Vernan cipher, where a message is de- 
composed in two correlated random signals and trans- 
mitted over two one-way channels. Although this system 
seems to be similar to ours in the sense that is also se- 
cure provided the eavesdropper has access to one chan- 
nel only, the situation is different if the eavesdropper can 
split a small fraction of both channels since in the clas- 
sical case, this can be done without the knowledge of 
the receiver. However, in our system the eavesdropper 
cannot choose arbitrarily the reflectivity of any "beam- 
splitter" used for extraction from the two channels since 
in the quantum case, the fraction of the beams extracted 
should be big enough so that the signal-to-noise ratio for 
the intercepted message is greater than one. But if this 
is the case, then unavoidable extra "noise" added to the 
transmitted beams by the open port of the "beamsplit- 
ter" degrades the signal-to-noise ratio of the message at 
the legitimate receiver, thus revealing the unauthorized 
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intervention during transmission. 

One might attempt to circumvent this difficulty by em- 
ploying a quantum extractioUpM-ocedure, such as quan- 
tum nondemolition detection O of the quadrature am- 
plitudes in Channels {A, B). Although the signal-to-noise 
ratio Rd at the receiver would not in this case be degraded 
by an ideal eavesdropper, the unauthorized intervention 
could nonetheless be discovered because of the injection 
of large fluctuations ( "back-action" noise) in the quadra- 
ture orthogonal to that in which signal information is 
stored, as previously noted. 

V. EXTENSIONS VIA RANDOM PHASE 
SWITCHING 

One way an eavesdropper Eve could access the signal 
and idler beams without the knowledge of the legitimate 
receiver is if she can intercept both channels completely, 
detect in the same manner as does the legitimate receiver 
(i.e.. Eve should also have access to a local oscillator 
phase stable with respect to that of sender and receiver) 
and retransmit the beams in the same way as the legit- 
imate sender. Because of this possibility, our protocol 
as described is certainly not secureynin contrast to the 
protocols for discrete variables. EZTO However, we sug- 
gest that simple extensions of our protocol might lead to 
significant enhancements in security. 

If the goal were to achieve quantum key distribution, 
one idea is to make straightforward adaptations of the 
protocols introduced by Bennett and colleagues for the 
discrete case, as in Ref. [p^-p6[. Here, we propose that 
the sending station {Alice) and receiving station (Bob) 
make random choices for the set of phases of the coherent 
message beam, as well as for the signal and idler beams. 
Recall that the variance V- {Q.) of Eq.|l| is the minimum 
possible and applies only for the choice of quadrature- 
phase angles {9a, Gb) for the signal and idler beams that 
satisfy Oa + Ob = ^pn {p — integer). For definiteness, 
assume the following two choices. 

1. {&%&%), with 0°^ + 9°g = and corresponding 
quadrature amplitudes {Xa, Xb)- 

2. {9\^^ =0\ + ^,0^/^ = 6*5 + 1) and corresponding 
quadrature amplitudes {Ya,Yb). 

In the first case, the minimum variance V^{Q) results 
for the combination {Xa —Xb), while in the second case, 
the combination {Ya + Yb) has minimum variance. This 
is because Yb —Yb is equivalent to the shift 9g 
6*3/^ + TT, SO that 9\^^ + el^^ + IT = 2t:. 

With these definitions, Alice at the sending station 
(randomly) makes one of two choices. 



1. Phase - Set the quadrature-phase angles {9a, 9b) 
to {9^, 9b) and the phases Pa,b = Pa b co- 
herent message beam \a) = \a\ exp[i/3] correspond- 
ing to the X quadratures of {A, B) . 

2. Phase f - Set {9a, 9b) to {9\^^,9g^^) and (3a,b = 

P^a'b — P\ b^'^ corresponding to the Y quadra- 
tures. 

The encoded message (which could consist of |q!| = 
[ao,ai] for a binary transmission) is sent to Bob's re- 
ceiving station precisely as in Figure 1. Bob must then 
choose the appropriate phases {ipA, 4>b) for his local oscil- 
lators {LOa, LOb) to detect quadrature amplitudes such 
that the spectral density <I>_(ri) for the difference pho- 
tocurrent z_ = — is minimized and the signal maxi- 
mized. In the case Phase 0, denote the local oscillator set- 
tings as {4'\,4>%), in correspondence to the detection of 
{Xa,Xb) with minimum variance V-{^). On the other 
hand, for the case Phase ^, the local oscillator phases 

(</)A>s) ^ {4>T,4>T) - (-^A + f + f ), in corre- 
spondence to the detection of {Ya, — Yb) with minimum 
variance. In both cases, the encoded message would be 
recovered with maximum signal-to-noise ratio. Note that 
precisely such a switching protocol was implemented in 
our prior experiment of Ref. |^ with results as stated for 
the variances. 

Of course. Bob does not know in advance which choice 
[0, ^] Alice will have made for any given transmission. 
Hence, he makes a random selection between the alter- 
natives (0^, (jPg) and (0^^^, 0g'^^), recovering the message 
in some cases but not others. After a series of transmis- 
sions, Alice and Bob communicate publicly about their 
choice of bases, keeping measurement results only when 
their choices coincide. 

Now, if an eavesdropper Eve attempts to intervene (ei- 
ther by a strategy of partial tapping or by one of com- 
plete interception and re-broadcast), she will necessarily 
increase the noise level and error rate at Bob 's receiving 
station. The random switching of the phases {9a, 9b) 
by Alice forces Eve to make a guess as to the correct 
quadratures {Sa,Sb) to be detected. Having made a 
choice, information about the orthogonal quadrature is 
lost. Of course, rather than homodyne detection, she 
could choose to employ heterodyne detection to gain in- 
formation about the full complex amplitude. However, 
relative to homodyne detection, heterodyne detection 
brings a well-known penalty of a 3dB reduction in signal- 
to-noise ratio. H 

While it is beyond the scope of the current paper to 
make any claims about the quantitative limits to the 
information that Eve might access or about the abso- 
lute ability of Alice and Bob to detect her presence, we 
do suggest that these would be interesting questions to 
investigate. There are certainly intervention strategies 
beyond those that we have mentioned that a cunning 
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Eve would want to consider, such as an adaptive strat- 
egy for adjusting the phases {Sa, Sb) during ilje duration 
of the transmission of any given message. & Likewise, 
in any real-world setting, overcoming the deleterious ef- 
fects of losses in propagation from Alice to Bob will be 
a overriding consideration. The question of preserving 
the entanglement of the initial EPR state in the face of 
such losses is a fascinating one for continuous quantum 
variables. Although initial attempts have been made to 
develop ermr_correcting quantum codes for continuous 
variables, oliJ no adequate solution seems to yet have 
been found. Finally, it would be of interest to analyze 
the case where only one of the two correlated beams is 
sent to Bob, with then Alice retaining the other. 
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FIG. 1. Principal components of the experiment show- 
ing the "transmitter", where a message e is combined with 
noise fields from a nondegenerate optical parametric amplifier 
(NOPA) at mirror M. The orthogonally polarized signal and 
idler beams arc separated by polarizer P, and then propagate 
along independent channels {A,B) to two separate balanced 
homodyne detectors that form the "receiver" . In the figure, 
arrows represent coherent amplitudes of various fields, while 
the shaded circles are meant to indicate their fluctuations. 



FIG. 2. (a) Signal recovery with correlated quantum states 
in channels {A,B). Trace i gives the spectral density ^'A(f2) 
of photocurrent fluctuations for channel A alone as a function 
of time. Trace ii is the spectral density $-(fi) for the com- 
bined photocurrent i- = Ia — is from both channels; here 
the "message" (coherent beam chopped on and off) clearly 
emerges, (b) Signal recovery with uncorrelated vacuum fluc- 
tuations. Again, trace i gives ^'^(fi) (channel A only) while 
trace ii gives <I>_(f2) (combined photocurrent i_). In (a) and 
(b) the vacuum-state level '^oa for channel A (signal beam 
only) and $o- for the combined photocurrent i_ (dual beam) 
are shown as dashed lines. Note that ^'oa lies 15 dB above the 
electronic noise floor. Spectrum analyzer acquisition param- 
eters are as follows: resolution bandwidth = 100 kHz, video 
bandwidth = 100 Hz, analysis frequency Qo/2n = 1.1 MHz, 
and sweep time = 300 ms. 



FIG. 3. Spectral density of the photocurrent fluctuations 
3>_(f2) for i- = iA — is for the case when the on-off mod- 
ulation of the message is encoded with small SNR. Trace i 
— Uncorrelated vacuum fluctuations. Trace ii — Correlated 
quantum fluctuations in channels {A,B). The vacuum-state 
limits ^'oA and $o- are indicated. Acquisition parameters 
are as in Fig. 2. 
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